FreeIPA Flaw Chain Lets Anonymous Clients Create Reusable Administrator Credentials
Red Hat says a chain of two flaws lets a client that has never logged in create a Kerberos identity of its own choosing in FreeIPA and end up in the administrators group, reproduced twice on a default installation and tracked as CVE-2026-76578 with a...